$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5C49/8A87EFC21A4811EB8F143246C4F9AE02/uX2PJTRWgJRJ7eXcXKJWmoTng9s.mft File: uX2PJTRWgJRJ7eXcXKJWmoTng9s.mft (raw, json) Hash identifier: dckvcfaUKk5q5ZaPDdSrG6/JF04Tjub2lYShvx6xydg= Subject key identifier: F5:FF:B1:FE:1D:20:D3:4D:13:D6:9E:2B:A9:F4:EC:CF:3A:C4:9F:D6 Authority key identifier: B9:7D:8F:25:34:56:80:94:49:ED:E5:DC:5C:A2:56:9A:84:E7:83:DB Certificate issuer: /CN=A91E5C49/serialNumber=B97D8F253456809449EDE5DC5CA2569A84E783DB Certificate serial: 07B0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uX2PJTRWgJRJ7eXcXKJWmoTng9s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E5C49/8A87EFC21A4811EB8F143246C4F9AE02/uX2PJTRWgJRJ7eXcXKJWmoTng9s.mft Manifest number: 0F5F Signing time: Sat 18 Oct 2025 22:38:56 +0000 Manifest this update: Sat 18 Oct 2025 22:38:55 +0000 Manifest next update: Sat 25 Oct 2025 22:38:55 +0000 Files and hashes: 1: uX2PJTRWgJRJ7eXcXKJWmoTng9s.crl (hash: vNvwqmj/KhbLIVrAjK3l3Skq8M3VpzLKbfA+VTSC8Dw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E5C49/8A87EFC21A4811EB8F143246C4F9AE02/uX2PJTRWgJRJ7eXcXKJWmoTng9s.crl rsync://rpki.apnic.net/member_repository/A91E5C49/8A87EFC21A4811EB8F143246C4F9AE02/uX2PJTRWgJRJ7eXcXKJWmoTng9s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uX2PJTRWgJRJ7eXcXKJWmoTng9s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 22:38:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1968 (0x7b0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5C49, serialNumber=B97D8F253456809449EDE5DC5CA2569A84E783DB Validity Not Before: Oct 18 22:38:55 2025 GMT Not After : Oct 25 22:38:55 2025 GMT Subject: CN=68f41700-4eb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:a1:cd:02:4b:3a:fd:6f:ae:54:6a:a1:98:8d: 29:fc:cf:ae:44:7b:b9:31:5e:9b:02:43:ea:21:6d: 6a:dc:b5:4e:fc:10:2b:bb:8c:bd:b9:e8:34:47:5f: 13:b2:eb:df:2a:9a:d0:25:b1:cd:50:46:42:f8:26: 68:48:14:3c:4e:ee:9e:4f:6e:95:27:cb:35:71:ba: b8:3d:5a:c6:c6:72:3f:05:63:3d:77:b3:19:74:03: f4:f2:77:1c:ea:49:7d:66:90:0e:5b:d9:86:cd:44: 2f:f5:47:28:68:db:e7:07:65:96:41:04:14:dd:44: 90:3a:72:59:a0:f0:16:a1:ff:ef:5a:05:f7:d3:ca: 6b:d9:73:f6:8d:c7:c5:2f:95:ed:6b:38:f7:19:35: 42:92:82:0d:63:68:dc:c4:d0:19:28:17:00:ce:1e: 3e:e8:92:43:3c:30:38:a2:1e:d7:8a:2e:f6:8d:9f: ab:3a:f1:68:b3:41:06:82:75:47:7b:87:74:d1:a5: fc:5a:ab:57:c9:cf:e0:d7:0b:57:23:d5:eb:b5:94: 1f:ba:2f:d4:4c:cd:97:7d:19:3d:9e:f4:4d:43:79: 5d:f2:c4:b9:e1:c3:8f:e7:98:9e:92:43:2f:db:e1: fc:5e:19:52:af:60:48:fe:0e:74:a9:36:89:4b:5c: 73:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:FF:B1:FE:1D:20:D3:4D:13:D6:9E:2B:A9:F4:EC:CF:3A:C4:9F:D6 X509v3 Authority Key Identifier: keyid:B9:7D:8F:25:34:56:80:94:49:ED:E5:DC:5C:A2:56:9A:84:E7:83:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E5C49/8A87EFC21A4811EB8F143246C4F9AE02/uX2PJTRWgJRJ7eXcXKJWmoTng9s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uX2PJTRWgJRJ7eXcXKJWmoTng9s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5C49/8A87EFC21A4811EB8F143246C4F9AE02/uX2PJTRWgJRJ7eXcXKJWmoTng9s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:0d:0c:cb:91:25:26:ce:33:65:ca:10:ea:aa:66:2c:40:07: 71:5d:3a:58:83:64:84:ef:ff:a6:ae:33:fa:8f:fa:9a:af:dc: 57:ab:53:72:ac:ee:e4:64:84:55:26:0e:5e:a5:6f:de:94:f1: 63:76:f1:5c:fb:48:02:52:37:13:19:a0:a3:f5:de:9f:39:ae: af:16:25:92:4b:3d:90:1e:57:64:ef:c5:9c:c6:ef:df:59:4a: ad:98:db:00:c0:de:b7:6f:93:41:ac:bd:46:d4:0a:b9:0a:db: 04:b9:83:ba:bd:bd:d3:54:6b:97:1c:99:67:91:e0:47:5e:35: 7a:d2:67:ab:9e:db:43:8f:9f:fd:d3:0e:79:32:96:58:1e:67: c6:51:dc:81:af:e8:4d:3c:3c:eb:08:15:8d:22:68:e0:33:78: 18:e4:73:21:9f:3a:09:bb:5d:22:37:a3:f7:6f:25:58:a3:21: 00:fa:d4:2b:47:fb:f6:a8:67:a9:ee:d7:33:b8:c8:9c:b8:91: a0:29:55:45:c6:9b:73:10:86:c4:ab:bb:70:a0:f7:d3:f9:ea: fe:d5:6a:36:9c:21:fe:da:2d:10:80:5f:ac:64:8a:95:ee:81: 29:f1:8c:31:61:76:8f:58:ae:5a:17:db:ce:63:0b:13:cd:00: 14:03:be:99 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB7AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTVDNDkxMTAvBgNVBAUTKEI5N0Q4RjI1MzQ1NjgwOTQ0OUVERTVEQzVDQTI1NjlB ODRFNzgzREIwHhcNMjUxMDE4MjIzODU1WhcNMjUxMDI1MjIzODU1WjAYMRYwFAYD VQQDEw02OGY0MTcwMC00ZWIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw6HNAks6/W+uVGqhmI0p/M+uRHu5MV6bAkPqIW1q3LVO/BAru4y9ueg0R18T suvfKprQJbHNUEZC+CZoSBQ8Tu6eT26VJ8s1cbq4PVrGxnI/BWM9d7MZdAP08ncc 6kl9ZpAOW9mGzUQv9UcoaNvnB2WWQQQU3USQOnJZoPAWof/vWgX308pr2XP2jcfF L5Xtazj3GTVCkoINY2jcxNAZKBcAzh4+6JJDPDA4oh7Xii72jZ+rOvFos0EGgnVH e4d00aX8WqtXyc/g1wtXI9XrtZQfui/UTM2XfRk9nvRNQ3ld8sS54cOP55iekkMv 2+H8XhlSr2BI/g50qTaJS1xzSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPX/sf4d INNNE9aeK6n07M86xJ/WMB8GA1UdIwQYMBaAFLl9jyU0VoCUSe3l3FyiVpqE54Pb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNUM0OS84QTg3RUZDMjFB NDgxMUVCOEYxNDMyNDZDNEY5QUUwMi91WDJQSlRSV2dKUko3ZVhjWEtKV21vVG5n OXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VYMlBKVFJXZ0pSSjdlWGNYS0pXbW9Ubmc5cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NUM0OS84QTg3RUZDMjFBNDgxMUVCOEYxNDMyNDZDNEY5QUUwMi91WDJQSlRSV2dK Uko3ZVhjWEtKV21vVG5nOXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA9DQzLkSUmzjNlyhDqqmYsQAdxXTpYg2SE7/+mrjP6j/qar9xXq1Ny rO7kZIRVJg5epW/elPFjdvFc+0gCUjcTGaCj9d6fOa6vFiWSSz2QHldk78Wcxu/f WUqtmNsAwN63b5NBrL1G1Aq5CtsEuYO6vb3TVGuXHJlnkeBHXjV60mernttDj5/9 0w55MpZYHmfGUdyBr+hNPDzrCBWNImjgM3gY5HMhnzoJu10iN6P3byVYoyEA+tQr R/v2qGep7tczuMicuJGgKVVFxptzEIbEq7twoPfT+er+1Wo2nCH+2i0QgF+sZIqV 7oEp8YwxYXaPWK5aF9vOYwsTzQAUA76Z -----END CERTIFICATE-----Generated at Mon Oct 20 03:56:15 2025 by rpki-client